42732 matches found
MAL-2026-6315 Malicious code in ts-arithmetic-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4712d3f1a81541e2b3143f89974200358301b0a9831c3187875adc1fbe82bfbe [email protected] ships source files that copy the big.js v7.0.1 library verbatim preserving Michael Mclaughlin's copyright banner and the...
CVE-2020-12459 vulnerabilities
Vulnerabilities for packages: grafana-fips...
MAL-2026-6284 Malicious code in new-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 47f6e9bcab53d95265012a31a4dcfc1485ed6db858e788e68ac2ac1ebc33fc34 index.js imports childprocess and contains execSync calls invoking bash and zsh around lines 301 and 317. Without traced execution context, it is not...
MAL-2026-6282 Malicious code in local-ip-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5741cea5f57c51246c2944fda4ecf601f191b482e5c6effa22b640f8701a00e8 index.js imports childprocess and calls execSync with bash and zsh lines 301 and 317. Without further context, it is unclear whether these invocation...
MAL-2026-6288 Malicious code in ts-numbering (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fa4527431d4606a2360de6e24717f43f7053fc7d94f2f57ac5278a5676f06b4d The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...
GHSA-J454-PVHH-FCMQ vulnerabilities
Vulnerabilities for packages: linux-aws, linux-qemu-melange, linux-azure, linux-qemu, linux-gcp, linux-vmware...
CVE-2025-68939 vulnerabilities
Vulnerabilities for packages: gitea-fips...
CVE-2026-49468 vulnerabilities
Vulnerabilities for packages: airflow...
CVE-2025-7064
creationtimestamp| type| source ---|---|--- 2026-06-23 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-174-05...
SUSE CVE-2026-23879
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Versions 1.1.2 and below contain an an arbitrary file write vulnerability, which allows symbolic links to be recreated outside the destination directory via crafted malicious...
SUSE CVE-2026-53488
containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config LABEL instruction in Dockerfile to a container without validation. This may result in executing an arbitrary command on the host, via ...
SUSE CVE-2026-55206
py7zr is a Python-based library and utility to support 7zip archive compression, decompression, encryption and decryption. Prior to 1.1.3, PackInfo.read in archiveinfo.py used an On^2 cumulative sum pattern for attacker-controlled numstreams values parsed from archive headers, allowing a crafted...
SUSE CVE-2026-55774
unknown...
Red-Teaming the Agentic Red-Team
The use of agentic systems to perform offensive security operations has moved from a theoretical possibility to a commoditized capability. However, while the community has focused on creating more and more capable agents, less attention has been allocated to assessing the security of those system...
ROS-20260623-73-0024
Vulnerability in Python 3.9 related to the failure to address CRWL sequences. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260623-73-0002
The vulnerability of the ASF plugin for the Gstreamer multimedia framework is related to insufficient data validation. Exploiting this vulnerability allows an attacker to execute arbitrary code...
CVE-2026-49214 vulnerabilities
Vulnerabilities for packages: nextcloud-server...
GHSA-34XG-WGJX-8XPH vulnerabilities
Vulnerabilities for packages: nextcloud-server...